Armitage Penetration Testing Tool

Hello everyone!

Armitage is a GUI tool for managing and performing tasks that could otherwise be performed by Metasploit. It is free and open source. It visualizes the target and recommends exploits, exposing the advanced post-exploitation features of the framework. Developed by Raphael Mudge, its goal is to help security professionals better understand hacking and realize the power of Metasploit. Users can launch scans and exploits, using Metasploit Framework's advanced meterpreter features.

Installation: if you're using an older version of Kali Linux, Armitage is preinstalled; on newer versions you'll need to install it.

Before running Armitage, first run the PostgreSQL and Metasploit services.

Open the Armitage directory where it was downloaded, extract it, and give it executable permission with sudo chmod +x filename. Then launch Armitage and click Connect — it will ask to start the RPC server, click OK to start.

With the Armitage console running, you can scan and exploit targets. Start Nmap to scan and enumerate the target: go to Host, then Nmap scan, and select the scan type you want to perform. Wait for the target to appear.

To check possible attacks, right-click on Host and select Attack, or click Exploit → Windows → exploit name, then double-click the exploit. Fill in the requirements and click Next to run the exploit, then wait for it to succeed and give you a meterpreter session.

In this blog you learned about the Armitage tool for cyber attack management using Metasploit. Armitage uses Nmap and Metasploit and saves a lot of time while performing penetration testing, and can test multiple targets at once.

Thanks for reading!